Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=false, but the description goes further by naming concrete consequences: the deletion cannot be undone, the client's shared link stops working, and an invoice previously generated from the estimate survives. Those downstream effects are exactly what an agent needs before firing a destructive call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.